Daily Brief, September 21, 2026
Daily Brief, September 21, 2026
Top Story
Two Western governments published Hormuz transit counts a full order apart for the same weekend
[ES/FA · Infobae, Tejarat News]
This weekend the two authoritative Western feeds for Hormuz transit counts diverged by roughly 3x to more than 10x over the same 72 hours -- UKMTO logged single-digit transits against a US daily average above 30 -- with no source named and no reconciliation from either. That's the number your war-risk premium and force-majeure notices are quietly built on.
Source: Infobae
United States
Cyber Threats
The one AI control your board signed off on has a named, reproducible bypass
Human-in-the-loop approval is the compensating control almost every AI governance policy written this year depends on, and a preprint published today shows a human can approve operation A while the runtime executes operation B, reproducibly, across multiple platforms, leaving an audit trail that says a human approved it.
Source: arXiv cs.CR
Around the World
Enforcement & Liability
Brazil's Supreme Court gave the finance ministry 90 days to review the securities rulebook after one bank's fraud
[PT · G1]
A single private-credit failure has moved from firm-level enforcement to a court-ordered review of a G20 securities regulator's framework on a 90-day clock, with the government required to report back conclusions and improvement measures.
Source: G1 — Economia
The Trump administration is preparing sanctions on the International Criminal Court
[PT · Valor Econômico]
Reported measures would bar US citizens and companies from providing the ICC money, goods or services without a Treasury license, after a six-to-seven-month grace period -- disrupting payments (including American staff salaries), IT services, insurance and investigator hiring, for a sanctions program built around an institution rather than named individuals, with no obvious screening list.
Source: Valor Econômico
Cyber Threats
Mexico's anti-corruption regulator found the Aeroméxico breach on Telegram before the airline said anything
[ES · El Universal]
Fifteen million customer records went up for sale on 18 September and the discovery came from a government body monitoring criminal marketplaces, which means your first notice of a vendor breach may arrive from a foreign regulator rather than from the vendor.
Source: El Universal (México)
Washington proposed an AI-incident notification channel to Beijing days before the summit
[DE/FR/RU · FAZ, Le Figaro, Kommersant]
The US Treasury Secretary put a mutual reporting mechanism for dangerous AI incidents on the Trump-Xi table on 24 September, and if it is agreed it becomes the first state-to-state AI incident channel, which sets the reporting threshold every vendor contract will eventually be measured against.
Source: FAZ — Wirtschaft
Russia's state-mandated super-app is a surveillance instrument by design
[DE · Heise Security]
A study of the Max app details monitoring that bypasses normal smartphone operating-system protections, and the app is mandatory, which makes any device carried into Russia by staff or a contractor a compromised device on return.
Source: Heise Security
Supply Chain Risk
Mali's mining regulator is striking over unpaid salaries in the same week as the mine it regulates
Four strike actions converge on Barrick's flagship Loulo-Gounkoto gold complex between 28 September and 2 October. One of them is the regulator's own staff -- so the export permit stops, the shipment certificate stops, and any dispute goes unadjudicated, on the same days the mine does.
Source: Mining.com
Europe's Q4 jet-fuel deficit hits 510,000 barrels a day, and three governments moved on retail fuel prices in one weekend
[AR · Asharq Al-Awsat]
Europe's Q4 jet-fuel deficit is 510,000 barrels a day. That shortfall already reached three governments with no direct stake in the Iran-Hormuz conflict, in one weekend: France hit a record 2.41 euros a litre for diesel, Serbia drew 20,000 tonnes from strategic reserves to hold prices down, and Bangladesh raised pump prices outright.
Source: Asharq Al-Awsat — Economy
Survey vessels loitering over subsea cables broadcast their positions the whole time, and standard maritime-risk detection still misses them
Chinese and Russian vessels are dwelling for days in grid patterns over named Pacific, Atlantic and Baltic cables, with AIS transponders on the entire time -- no dark-vessel activity, no spoofing. The detection tools insurers price against are built to flag a broadcast gap, not to analyze the behavior of a vessel that's fully visible, so this pattern passes through undetected by design, not by evasion.
Source: Hellenic Shipping News
A second US tariff lands on Algerian steel: 73.33% on wire rod, after 72.94% on rebar in July
[FR · TSA]
The US hit Algerian rebar with a 72.94% anti-subsidy duty in July 2026; this month it added a 73.33% duty on wire rod. Two sequential actions on two different steel categories narrows the substitution options for anyone who moved sourcing to North Africa to escape the first tariff.
Source: TSA (Tout Sur l'Algérie)
Geopolitical Shocks
Saudi central bank disputes report it 'withdrew' from China's mBridge project, says its limited role simply ended as planned in May 2025
[AR/RU · Asharq Al-Awsat, Kommersant]
SAMA says it was never more than a sandbox-testing observer and its scheduled participation ended sixteen months ago -- but the fact that this only became public via FT reporting, not SAMA disclosure, is still the real measure of how much a treasury policy written against "our counterparties use SWIFT" can actually verify.
Source: Asharq Al-Awsat — Economy
Bolivia extended its state of emergency 90 days as diesel prices doubled
[DE · amerika21]
The legislature voted 100-58 to run the emergency through 17 December as an IMF-linked subsidy removal roughly doubled diesel to 17.95 bolivianos a litre, with transport unions threatening an indefinite strike, and the previous round of blockades caused over $3 billion in damage.
Source: amerika21
France's borrowing premium over Germany passed 100 basis points, the widest since the eurozone debt crisis
[AR · Asharq Al-Awsat]
The ten-year French-German spread crossing 100 basis points repriced the second-largest euro-area sovereign, which flows into euro-denominated funding costs and into the credit assumptions behind any French counterparty on your books.
Source: Asharq Al-Awsat — Economy
Iran's oil revenue hit a six-month record while under naval blockade
[FA · Tejarat News]
Iranian press reports $16 billion in first-half oil revenue as a six-month record, published in the same cycle as the oil ministry's plan to add 250,000 barrels a day, which is the sanctioned side's own account of how well the pressure campaign is working.
Source: Tejarat News
A Tehran MP argues publicly against leaving the nuclear non-proliferation treaty
[FA · Donya-e-Eqtesad]
A parliamentary representative opposed the three-urgency NPT-withdrawal bill on the grounds that withdrawal signals intent to build a weapon and costs Iran its remaining allies, which is visible internal dissent on the question Western capitals are modelling as unanimous.
Source: Donya-e-Eqtesad
The AfD's co-chair called for Russian gas to return to Germany, days after the party's Saxony-Anhalt and Mecklenburg-Vorpommern election wins
[RU · RBC]
Alice Weidel told Reuters Germany should end its Russian oil-and-gas boycott: "Cheap energy from Russia was the secret of the success of 'Made in Germany'. We need it back." She said it in the same week her party topped the polls in two eastern German states -- the position is coming from a party now positioned to govern, not a fringe one.
Source: RBC
Infrastructure & Capacity
Lithuania says it has no counter-drone coverage until 2027, and has funded software
A NATO member has published its own capability gap with a date on it: no integrated counter-drone system before mid-2027 at the earliest, the short-range band explicitly uncovered, and five million euros allocated against a requirement its defence ministry costs in the billions.
Source: Kauno Diena
The UN is cutting African peacekeeping as US aid reductions continue
[FR · Mondafrique]
Peacekeeping drawdowns in a funding crisis remove the security floor that a lot of African operating assumptions quietly rest on, and the replacement is either a private security line item or a deferred project.
Source: Mondafrique
Scheduled blackouts continue in Iran's poorer provinces after officials said they had ended
[FA · Tejarat News]
Published outage schedules from provincial distribution companies contradict the national statement that scheduled blackouts were over, which is the domestic cost of the war showing up in a place the government has an interest in not reporting.
Source: Tejarat News
Get the full risk analysis every Sunday. Manage your subscription.
